Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/NpeYIfrku_FCXPjwDkiFxXCgDcc.roa
File:                     NpeYIfrku_FCXPjwDkiFxXCgDcc.roa (raw, json)
Hash identifier:          JpEhBfFaYAM0Wk51xAf4dS0MWv7X3OShhLmSCBoXnCQ=
Subject key identifier:   36:97:98:21:FA:E4:BB:F1:42:5C:F8:F0:0E:48:85:C5:70:A0:0D:C7
Certificate issuer:       /CN=3e5693737ef1b022185b36c68f7d337723d7cdfb
Certificate serial:       088F64
Authority key identifier: 3E:56:93:73:7E:F1:B0:22:18:5B:36:C6:8F:7D:33:77:23:D7:CD:FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlaTc37xsCIYWzbGj30zdyPXzfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/NpeYIfrku_FCXPjwDkiFxXCgDcc.roa
Signing time:             Thu 27 Jan 2022 09:26:27 +0000
ROA not before:           Thu 27 Jan 2022 09:26:27 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     15626
IP address blocks:        62.68.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560996 (0x88f64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5693737ef1b022185b36c68f7d337723d7cdfb
        Validity
            Not Before: Jan 27 09:26:27 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=36979821fae4bbf1425cf8f00e4885c570a00dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d1:f3:2a:06:88:07:46:a1:ca:4f:5d:69:6b:
                    93:a8:3b:3e:06:56:b4:63:fe:92:f4:49:4d:ec:c6:
                    c0:f8:32:61:6b:3c:b4:49:f9:1b:7e:73:33:31:8d:
                    b2:7b:ac:b6:86:77:77:81:04:6c:de:8e:c0:b8:bb:
                    d7:15:f7:0b:37:78:1d:57:e6:04:8c:fc:31:44:99:
                    f7:07:c5:ac:ba:8c:d2:01:d3:1c:1c:5c:47:ce:54:
                    21:fb:24:d9:1a:46:7f:e7:4b:62:1e:bb:76:fd:fa:
                    db:13:48:67:2c:90:39:44:a6:7e:7e:e4:5e:bf:d9:
                    c1:54:9c:94:e5:9a:de:b5:61:b2:d3:69:b4:fe:1c:
                    03:63:9e:31:c4:a6:5d:b5:3d:c2:37:39:f7:d0:b6:
                    60:ee:be:22:9a:fd:d3:4f:04:7f:db:c7:a1:24:c8:
                    31:e5:09:e7:d3:fb:6c:9a:91:fb:9e:57:04:52:e4:
                    87:a4:05:23:ff:f2:ff:19:d5:9a:34:c0:19:8e:81:
                    47:95:b3:6a:52:ae:2d:20:4d:9f:05:b8:fe:6e:c3:
                    c3:93:2e:42:4a:cc:94:98:e1:fd:2c:2f:c2:de:71:
                    c4:c6:bf:2e:fe:2f:3d:d1:84:84:3d:03:9d:bd:7a:
                    0d:d6:2f:37:63:6a:71:a9:f9:40:96:b6:09:62:37:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:97:98:21:FA:E4:BB:F1:42:5C:F8:F0:0E:48:85:C5:70:A0:0D:C7
            X509v3 Authority Key Identifier:
                keyid:3E:56:93:73:7E:F1:B0:22:18:5B:36:C6:8F:7D:33:77:23:D7:CD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlaTc37xsCIYWzbGj30zdyPXzfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/NpeYIfrku_FCXPjwDkiFxXCgDcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d80953-9d26-4c5b-aed7-b630d7e27011/1/PlaTc37xsCIYWzbGj30zdyPXzfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.68.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:d0:71:a1:d4:aa:68:a1:54:64:7c:57:8e:02:27:1e:e4:ee:
         3a:d0:3a:8c:4d:a2:8c:d5:3e:23:8a:f6:fb:c4:6f:08:9b:d5:
         e8:dc:ab:99:bb:b0:52:88:0c:93:c9:ab:21:d3:f7:49:12:c5:
         3c:54:61:4b:46:a3:40:7c:ba:64:c1:91:de:a9:c1:e2:a8:d7:
         b0:20:11:14:73:a7:23:7b:41:61:21:13:21:0d:c9:a3:aa:85:
         95:60:eb:27:4b:3b:bd:0d:95:69:a7:24:9a:d2:08:63:c6:eb:
         84:80:f6:30:af:af:cc:84:5b:cc:b0:45:28:9c:b4:13:90:b1:
         1d:06:53:ed:8a:c0:64:b5:40:0d:81:c2:d5:17:aa:b5:9b:14:
         32:28:db:9f:2e:b9:fc:c9:47:7d:91:de:51:8e:7c:e8:bf:bc:
         a3:06:f9:61:6d:b2:72:78:65:da:54:78:cb:f5:32:3f:10:10:
         69:27:1b:e1:5f:24:c6:7b:d4:a1:68:4a:fc:17:d4:f3:1f:d8:
         2b:68:e3:f5:a0:18:6b:67:c7:a7:cf:7b:67:a9:8e:f7:2c:83:
         60:39:42:33:1d:9e:e9:ad:30:7c:a5:79:6f:3b:97:d3:a4:64:
         f0:ec:5d:83:0d:54:42:11:b2:e9:59:fd:aa:9d:ce:ac:30:e9:
         38:13:ed:36
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDCI9kMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDNl
NTY5MzczN2VmMWIwMjIxODViMzZjNjhmN2QzMzc3MjNkN2NkZmIwHhcNMjIwMTI3
MDkyNjI3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzNjk3OTgyMWZhZTRi
YmYxNDI1Y2Y4ZjAwZTQ4ODVjNTcwYTAwZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5NHzKgaIB0ahyk9daWuTqDs+Bla0Y/6S9ElN7MbA+DJhazy0
SfkbfnMzMY2ye6y2hnd3gQRs3o7AuLvXFfcLN3gdV+YEjPwxRJn3B8WsuozSAdMc
HFxHzlQh+yTZGkZ/50tiHrt2/frbE0hnLJA5RKZ+fuRev9nBVJyU5ZretWGy02m0
/hwDY54xxKZdtT3CNzn30LZg7r4imv3TTwR/28ehJMgx5Qnn0/tsmpH7nlcEUuSH
pAUj//L/GdWaNMAZjoFHlbNqUq4tIE2fBbj+bsPDky5CSsyUmOH9LC/C3nHExr8u
/i890YSEPQOdvXoN1i83Y2pxqflAlrYJYjcMlwIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFDaXmCH65LvxQlz48A5IhcVwoA3HMB8GA1UdIwQYMBaAFD5Wk3N+8bAiGFs2
xo99M3cj1837MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
UGxhVGMzN3hzQ0lZV3piR2ozMHpkeVBYemZzLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9hZC9kODA5NTMtOWQyNi00YzViLWFlZDctYjYzMGQ3ZTI3MDExLzEv
TnBlWUlmcmt1X0ZDWFBqd0RraUZ4WENnRGNjLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9k
ODA5NTMtOWQyNi00YzViLWFlZDctYjYzMGQ3ZTI3MDExLzEvUGxhVGMzN3hzQ0lZ
V3piR2ozMHpkeVBYemZzLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkRXMA0GCSqGSIb3DQEBCwUAA4IB
AQCN0HGh1KpooVRkfFeOAice5O460DqMTaKM1T4jivb7xG8Im9Xo3KuZu7BSiAyT
yash0/dJEsU8VGFLRqNAfLpkwZHeqcHiqNewIBEUc6cje0FhIRMhDcmjqoWVYOsn
Szu9DZVppySa0ghjxuuEgPYwr6/MhFvMsEUonLQTkLEdBlPtisBktUANgcLVF6q1
mxQyKNufLrn8yUd9kd5Rjnzov7yjBvlhbbJyeGXaVHjL9TI/EBBpJxvhXyTGe9Sh
aEr8F9TzH9graOP1oBhrZ8enz3tnqY73LINgOUIzHZ7prTB8pXlvO5fTpGTw7F2D
DVRCEbLpWf2qnc6sMOk4E+02
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:37 2024 by rpki-client on console-fra.rpki-client.org